Replace User::isAllowed with PermissionManager.